We want to discuss the security features we have implemented and the strengths and weaknesses this gives our implementation.
\paragraph{Strength}
\begin{itemize}
\item We use the PHP function mysql\_escape\_real\_string to secure that dynamic input cannot be used to exploit our database.
\item The group members private keys are kept locally on our own computers, and the server key is kept on the server on an inaccessible area.
\item We used SSLRequire to give authorization to the certificates we wanted to have access.
\end{itemize}
\paragraph{Weakness}
\begin{itemize}
\item We do not have session management
\item We are not protected against brute force attacks on our login client
\item Forgot to put password protection on our SVN repository
\end{itemize}